> I don't really check who's building my websites or little tools I purchase.

How do you sleep at night? Honest question. I want to know the assumptions and reasoning that leads to one being comfortable with this decision.

I’m probably more worried than I should be, but every time I look at my puny little openBSD webserver’s log, I find about 2 to 5 new attempts to scan my server for various exploits a month. Each attempt is a relentless scans looking for all sorts of holes with hundreds of potential exploits. The first time I read those logs, I swore I would never move from openBSD + httpd ever.

The internet is outright hostile to any computer with an ip address and a port open to the internet.

I’m sure there are some companies out there that provide hosting solutions that do a good job at keeping things updated - but even they are defenseless against things like the recent log4j vulnerability (and that’s just the stuff the good guys caught). At the very least, I would want to know who is building my websites and what their track record is.